This section focuses on the technical aspects of digital evidence acquisition. This includes detailed examination of the tools and techniques that can be leveraged for proper evidence acquisition.
This section comprises the following chapters:
Section 2: Evidence Acquisition
by Gerard Johansen
Digital Forensics and Incident Response - Second Edition
- Title Page
- Copyright and Credits
- About Packt
- Contributors
- Preface
- Section 1: Foundations of Incident Response and Digital Forensics
- Understanding Incident Response
- Managing Cyber Incidents
- Fundamentals of Digital Forensics
- Section 2: Evidence Acquisition
- Collecting Network Evidence
- Acquiring Host-Based Evidence
- Forensic Imaging
- Section 3: Analyzing Evidence
- Analyzing Network Evidence
- Analyzing System Memory
- Memory analysis overview
- Memory analysis methodology
- Memory analysis with Redline
- Memory analysis with Volatility
- Memory analysis with strings
- Summary
- Questions
- Further reading
- Analyzing System Storage
- Analyzing Log Files
- Writing the Incident Report
- Section 4: Specialist Topics
- Malware Analysis for Incident Response
- Leveraging Threat Intelligence
- Hunting for Threats
- Appendix
- Assessment
- Chapter 1: Understanding Incident Response
- Chapter 2: Managing Cyber Incidents
- Chapter 3: Fundamentals of Digital Forensics
- Chapter 4: Collecting Network Evidence
- Chapter 5: Acquiring Host-Based Evidence
- Chapter 6: Forensic Imaging
- Chapter 7: Analyzing Network Evidence
- Chapter 8: Analyzing System Memory
- Chapter 9: Analyzing System Storage
- Chapter 10: Analyzing Log Files
- Chapter 11: Writing the Incident Report
- Chapter 12: Malware Analysis for Incident Response
- Chapter 13: Leveraging Threat Intelligence
- Chapter 14: Hunting for Threats
- Other Books You May Enjoy
Section 2: Evidence Acquisition
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.